🇺🇸
jcbriar
2026-09-02 14:43:58
UTC ·
(2 months ago)
Searching for vulnerable scripts
Hacking
Web App Attack
🇫🇷
masterguru
2026-09-02 12:50:48
UTC ·
(2 months ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-196)
Hacking
Web App Attack
🇺🇸
mnsf
2026-09-02 08:05:22
UTC ·
(2 months ago)
Scanning/Probing (24)
Brute-Force
Web App Attack
🇨🇦
Anytech
2026-09-02 07:55:52
UTC ·
(2 months ago)
Blocked by Conn-Monitor: env-probing
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-09-02 07:41:26
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 34.75.16.72 (72.16.75.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 03:41:21.174035 2026] [security2:error] [pid 10145:tid 1014 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.75.16.72 (72.16.75.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 03:41:21.174035 2026] [security2:error] [pid 10145:tid 10145] [client 34.75.16.72:49590] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "remote911.net"] [uri "/www/.git/config"] [unique_id "apfTIZ-97oIrJMTv7DzDigAAABw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
masterguru
2026-09-02 07:07:51
UTC ·
(2 months ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-193)
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-09-02 05:35:35
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 34.75.16.72 (72.16.75.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 01:35:27.837721 2026] [security2:error] [pid 22682:tid 2268 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.75.16.72 (72.16.75.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 01:35:27.837721 2026] [security2:error] [pid 22682:tid 22682] [client 34.75.16.72:51480] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.marketask.com"] [uri "/wordpress/.git/config"] [unique_id "ape1nwyM6k0rkJ5LSmzaeAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-02 05:09:26
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 34.75.16.72 (72.16.75.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 01:09:19.189505 2026] [security2:error] [pid 15023:tid 1502 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.75.16.72 (72.16.75.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 01:09:19.189505 2026] [security2:error] [pid 15023:tid 15023] [client 34.75.16.72:44098] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.quintechcorp.com"] [uri "/www/.git/config"] [unique_id "apevf4Vo9UUnPXnpPrG-7AAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
FD-IX
2026-09-02 04:54:05
UTC ·
(2 months ago)
Fail2Ban: ModSecurity detected a web application attack.
Bad Web Bot
Web App Attack
🇳🇱
WeCloudit-Anti-Abuse
2026-09-02 04:43:44
UTC ·
(2 months ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-09-02 03:47:01
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 34.75.16.72 (72.16.75.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 23:46:53.970897 2026] [security2:error] [pid 29602:tid 2960 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.75.16.72 (72.16.75.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 23:46:53.970897 2026] [security2:error] [pid 29602:tid 29602] [client 34.75.16.72:43070] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dmasoftlab.com"] [uri "/app/.git/config"] [unique_id "apecLQjIzFDp8WndMHrXtwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
kosada.com
2026-09-02 03:37:13
UTC ·
(2 months ago)
Repeated requests for suspicious nonexistent URLs, for example: /.git/config (HTTP/1.1 port 443, user agent: "crusader-worker/1.0")
Web App Attack
Anonymous
2026-09-02 02:39:34
UTC ·
(2 months ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
Anonymous
2026-09-02 01:50:02
UTC ·
(2 months ago)
suspicious request in access.log
Web App Attack
🇺🇸
TPI-Abuse
2026-09-02 00:48:00
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 34.75.16.72 (72.16.75.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 20:47:55.694356 2026] [security2:error] [pid 20790:tid 2081 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.75.16.72 (72.16.75.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 20:47:55.694356 2026] [security2:error] [pid 20790:tid 20811] [client 34.75.16.72:49024] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ftp.mailme.name"] [uri "/public/.git/config"] [unique_id "apdyO6v2Np-HaRMveFFoVgAAAE0"]
show less
Brute-Force
Bad Web Bot
Web App Attack